Senior Cloud Platform Engineer (AWS) – Landing Zone

About the role

Nordea is seeking a Senior Cloud Platform Engineer with deep AWS expertise to own and evolve its AWS Landing Zone. This hands‑on position involves building new platform capabilities while ensuring existing services remain healthy, secure and reliable.

Key responsibilities

• Develop and maintain Landing Zone infrastructure as code using Terraform, and automate configuration with Ansible, Python and Bash.
• Design and operate CI/CD pipelines for Landing Zone changes, including automated testing and DevOps practices.
• Architect networking across a multi‑account environment: VPCs, subnets, security groups, route tables, Transit Gateway, Direct Connect and Site‑to‑Site VPN.
• Implement zero‑trust access controls using IAM, service control policies and network segmentation.
• Set governance guardrails (Control Tower, Landing Zone Accelerator) to meet banking security standards.
• Build observability dashboards and monitor platform health.
• Lead P1/P2 incident response, root‑cause analysis and post‑mortem improvements.

Required profile

• 5+ years of hands‑on cloud engineering experience at enterprise scale, primarily on AWS.
• Proven experience designing, implementing and operating an AWS Landing Zone or equivalent multi‑account foundation.
• Strong understanding of AWS networking, hybrid connectivity and zero‑trust principles.

Required skills

• AWS (including Control Tower, Landing Zone Accelerator)
• Terraform
• Ansible
• Python
• Bash
• CI/CD pipeline design
• VPC, Transit Gateway, Direct Connect, Site‑to‑Site VPN
• IAM and service control policies

What we offer

• Hybrid working model with flexibility.
• Opportunities for growth within one of the largest Nordic banks.
• Inclusive, diverse culture committed to sustainability and continuous learning.